Merge pull request #9 from step-security-bot/stepsecurity_remediation…

…_1705784741 [StepSecurity] Apply security best practices
pzaino · Jan 20, 2024 · 9834935 · 9834935
2 parents 5511ca6 + 8e80c87
commit 9834935
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 2 deletions.
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -50,7 +50,7 @@ jobs:
 
         # Ensure the right golang version is installed
       - name: Install Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
         with:
           go-version-file: go.mod
 

diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
@@ -19,7 +19,7 @@ jobs:
     - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
     - name: Set up Go
-      uses: actions/setup-go@v4
+      uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
       with:
         go-version-file: go.mod
 

diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
@@ -17,6 +17,9 @@ on:
 # Declare default permissions as read only.
 #permissions: read-all
 
+permissions:
+  contents: read
+
 jobs:
   analysis:
     name: Scorecard analysis

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -28,3 +28,7 @@ repos:
     rev: v8.38.0
     hooks:
       - id: eslint
+  - repo: /~https://github.com/jumanjihouse/pre-commit-hooks
+    rev: 3.0.0
+    hooks:
+      - id: shellcheck